Description
WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic is prone to multiple vulnerabilities, including SQL injection and privilege escalation vulnerabilities. Exploiting these issues may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database, or to perform otherwise restricted actions and subsequently access protected REST API endpoints. WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic versions between 4.0.0 - 4.1.5.2 and 4.1.3.1 - 4.1.5.2 (inclusively) are vulnerable.
Remediation
Update to plugin version 4.1.5.3 or latest
References
Related Vulnerabilities
WordPress Plugin Mobile Booster Security Bypass (1.0)
Oracle Database Server CVE-2009-1970 Vulnerability (CVE-2009-1970)
phpBB URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2015-3880)
WordPress Plugin WP Symposium Open Redirect (13.04)
WordPress Plugin PHPFreeChat 'url' Parameter Cross-Site Scripting (0.2.8)